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FIG. 7 
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C <encry ptclass type="3DES" len="1 68" creatorDN=". . ." 
creatorCertif="..."> 
<encrypt:key 

DN="cn=managers,ou=groups ) o=acme" 
Keyldentifier= ,, MIIGE]CCBbygAwlBAglKFZrHywAQ" 
Ekey="QAAAAAAzANBgkqhkiG9wOBAQUFAD"/> 
J <encrypt:key 

\ DN="cn=E1 35246, ou=users,o=acme" 

Keyldentifier="CSqGSIb3DQEJARYbYm9zcOBicnFQ" 
Ekey="QudGlucmFsZWInaC5pYm0uY29tMQ7> 
<encrypt:key 

DN="cn=hr,ou=groups,o=acme" 

Keyldentjfier= ,, DlbQzcOBEYbCicnFSqGS3YJmAR9Q" 

Ekey="dpYmGmFsZWaCc50u9lntMYIu2QuQ7> 

V_</encrypt:class> 



740 ~< - digital signature over encryption header and rules - 




<encrypt:rules> 

- encrypted version of container's rules - 
</encrypt:rules> 




<encrypt:hash> 

- secure hash over container's rules - 
</encrypt:hash> 





<encrypt:documentComponent> 
- encrypted document component - 
</encrypt:documentComponent> 
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FIG. 8 
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